ci: Use GitHub attestations

[edgarrmondragon]

Summary

As seen in https://github.blog/2024-05-02-introducing-artifact-attestations-now-in-public-beta/

Test Plan

Checklist

• My pull request has a descriptive title.
• I have read the CONTRIBUTING guide.
• I have added tests that prove my fix is effective or that my feature works.
• If appropriate, I have added necessary documentation.
• For user-facing changes, refactorings, performance improvements or documentation updates, I have added a changelog entry using the Changie tool.

For both the title of the PR and the changelog entry, prefer simple past tense or constructions with "now". For example:

• Added Client.invite_participants()
• Client.user_activation_settings() now accepts a user_activation_settings keyword argument

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
No data about Duplication

See analysis details on SonarCloud